CERT Polska: Known Flaw in Zimbra Collaboration Suite is Being Exploited
NEOSEC enrichment — no mirror of the original source
On Monday, August 17, CERT Polska published an announcement warning that a known vulnerability in Zimbra Collaboration Suite is being actively exploited. The high-severity OS command injection vulnerability (CVE-2026-73570, CVSS score 8.9)
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Neely.
Linked advisories
Affected vendors and products
More on Polska
Other advisories
- MediumCVE-2026-70368Mobi-Com Polska Sp. z o.o. Stunnel: Lesen außerhalb des zugewiesenen Speichers (Out-of-bounds Read)
- MediumCVE-2026-70367Mobi-Com Polska Sp. z o.o. Stunnel: Server-Side-Request-Forgery (SSRF)
- HighCVE-2025-8122Polska Akademia Dostępności PAD CMS: SQL-Injection
- HighCVE-2025-8121Polska Akademia Dostępności PAD CMS: SQL-Injection
- CriticalCVE-2025-8120Polska Akademia Dostępności PAD CMS: uneingeschränkter Dateiupload
- MediumCVE-2025-8119Polska Akademia Dostępności PAD CMS: Cross-Site-Request-Forgery (CSRF)
- MediumCVE-2025-8118Polska Akademia Dostępności PAD CMS: fehlende Begrenzung von Anmeldeversuchen
- HighCVE-2025-8117Polska Akademia Dostępności PAD CMS: Sicherheitslücke
Other news entries
- MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH KeyNewsThe Hacker News
- Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without AuthenticationNewsThe Hacker News
- Hackers Target Zimbra Servers in Active Exploitation CampaignNewsSecurityWeek
- Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code ExecutionNewsThe Hacker News
- Critical Zimbra RCE flaw now actively exploited in attacksNewsBleepingComputer
- MikroTrick: RouterOS-Lücken werden aktiv ausgenutzt – jetzt patchenNewsheise Security
ID